New CMS is going up right now.

[Catp00p]

New CMS is going up right now.

I am in the process of installing and testing the new CMS and will probably not go to sleep until its done.... even if I have to stay up til Monday morning.

PHPNuke is now gone. All of our news, reviews, preivews, etc are still preserved and will appear on the new site, but the system that runs it is gone. I've noticed a few bugs with the forums since then, and I've fixed them. If anyone see's anything acting weird please reply in this thread.

Check out the main page http://www.nextgengamers.net/

*POOF* All gone.

Wish me luck.

 

[Catp00p]

Oh and I do notice the missing smilies.... which for some reason are scattered all over the server, so they are not a priority until the CMS is up.

 

[Catp00p]

Damn... and another thing... some of you may have missing avatars and sigs... not to worry I have backed up everything to my compuer.

NGG has been hacked before. One possible way this happens is because no one ever disabled the file directories on our server from giving a file index (if there is no index.html file it just shows you a list of all the existing files in that directory, letting you view things that should be hidden!) This is usually one of the first methods a website hacker will use to hack a site. We didn't even have the directory protected that stores our password for the database. I'm about 99% sure that is why we got hacked.

For this reason while I was deleting PHPNuke I also deleted everyone's personal folders. From now on no more personal storage space on NGG. If you want us to host your sig talk to me, sonic, adam or nastyman.

 

[radiohead]

wait so we were hacked and that's why the site was down? i thought it just had something to do with our host or something else, i dont know.

 

[Catp00p]

Yes, we are referring to the same incidents. Most users here would have never noticed, only the staff. And, like I said, it was a possiblity.

Steps to hacking are a website are:

1) looking for directory listings
2) looking for php redirects that use specific page names as variables (which for some reason, I have seen nuke do)

I won't list more as I don't want anyone getting ideas. Athough the new CMS is as secure as it can possibly be.

One of the things I did while teaching myself php was to also teach myself how to hack php sites, so that my sites would never be vunerable. As we learn everyday nothing is 100% unhackable, but those son of a bitches are gonna have a lot more trouble hacking us now.

 

[radiohead]

i never noticed any hacking. i guess im not 1337